Privacy statement
Mustad Data Privacy Policy
3 August 2023
Mustad Netherlands B.V. and its affiliates (“Mustad”, "us", "we", or "our") have created this Privacy Policy to inform you of our policies regarding the processing of Personal Data in the context of our global business operations. This includes the processing of Personal Data through our collective websites (as set out below in Definitions) and our EQUINET mobile application (collectively: the "Services").
This privacy policy contains information regarding the collection, use, and disclosure of Personal Data when you use our Services and the choices and rights you have associated with the processing of your Personal Data. It explains in general terms how we seek to comply with data protection laws and regulations, including but not limited to the European General Data Protection Regulation (“GDPR”) and national laws implementing the GDPR, as well applicable data protection legislation in other jurisdictions, such as Australia and New-Zealand.
Definitions
Services
Our Services consist of all products and services that we may provide, including the following websites and mobile applications operated or provided by Mustad:
o www.mustad.com
o www.stcroixforge.com
o www.hellerhoofrasps.com
o www.capewellhorsenails.com
o shop.mustad.com
o shop.mustad.se
o mustadbenelux.com
o farrierportal.com
o EQUINET App (mobile application) and equinetapp.com
Personal Data
Personal Data means any information relating to a living individual who can be identified from that information (or from that and other information either in our possession or likely to come into our possession).
Usage Data
Usage Data is data collected automatically either generated using certain Services or from the Services infrastructure itself (for example, the duration of a webpage visit or your use of our EQUINET app).
Cookies
Cookies are small pieces of data stored on your device (computer or mobile device).
Data Controller
Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.
with the exception of certain data that you may choose to process using our EQUINET app (see below), we are the Data Controller for the processing of your Personal Data in relation to our Services.
Data Processors (or Service Providers)
Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller.
We may use the services of various Service Providers in order to process your data more effectively.
Information collection and use
TYPES OF DATA COLLECTED
Personal Data
While using our Services, we may ask you to provide us with certain personally identifiable information (Personal Data) that can be used to contact or identify you .
Personal Data that we may require includes:
● Email address
● First name and last name
● Phone number
● Address, State, Province, ZIP/Postal code, City, Country
● Business name and title
Other Personal Data that you may choose to process by using our EQUINET App
You may choose to process certain Personal Data by using our EQUINET App, such as Personal Data concerning your customers and their horses, services that you perform for your customers, appointments scheduled with customers or other third parties, etc. For this purpose, the EQUINET App allows you, amongst others, to import your contacts directly from your device's phone book to the EQUINET App. This service can be used at your sole discretion. You are in control of and are responsible for the Personal Data of your customers and other third parties that you choose to process in the EQUINET App. For this category of Personal Data, you are the Data Controller and Mustad is the Data Processor (as defined in the GDPR). The Terms of Use for our EQUINET App include data processing terms (‘standard clauses on data processing’) that apply to our processing of Personal Data as a Data Processor.
Usage Data
We may also collect information how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
Cookies
We use cookies and similar technologies to analyse the activity on and use of our Services. Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are tags and scripts to collect and track information to improve and analyse (the use of) our Services. This is done to make your customer experience better when using our Services.
Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. You can also individualise cookie settings on our websites through the pop-up notice. If you choose to decline certain cookies, it could be that you may not be able to access all or parts of our websites.
Purposes for the processing of Personal Data
We process your Personal Data for one or more of the following purposes (depending on our relationship with you):
● To provide and maintain our Services
● To notify you about changes to our Services
● To allow you to participate in interactive features of our Services when you choose to do so
● To provide customer support
● To gather statistical information so that we can improve our Services
● To monitor the usage of our Services
● To detect, prevent and address technical issues
● To contact you and process information that you have provided to us in relation to your job or internship application with Mustad.
● To send out newsletters, invitations to our events and other marketing communications that may be relevant to you, as well as in the context of a (registration for) one of our events. When you have attended one of our events, we may also contact you for feedback.
● For safety purposes, through the use of camera surveillance to protect the possessions and safety of us, our employees and visitors.
Legal basis for processing Personal Data under the GDPR
Mustad's legal basis for collecting and processing the Personal Data as described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.
Mustad may process your Personal Data on the basis of one or multiple of the following legal grounds:
● The performance of an agreement with you or to take measures before the conclusion of an agreement
● Your informed consent
● A legitimate interest
● To comply with applicable law and legal obligations (including valid requests by public authorities for the disclosure of Personal Data).
Retention of data
Mustad will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
Mustad will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a relatively short period of time, except when this data is used for security purposes or to improve the functionality of our Services, or if we are legally obligated to retain this data for longer time periods.
Sharing your Personal Data
In some cases, we may share your Personal Data with third parties. We will only do this when we consider this necessary. We only share your data with trustworthy parties and ensure that a transfer of your Personal Data is subject to appropriate safeguards.
If you are located outside the Netherlands and choose to provide information to us, please note that we transfer the data, including Personal Data, to the Netherlands and process it there.
We may share your personal data with:
- Government institutions such as the tax authorities and supervisory authorities.
- Mustad affiliates, distributors, suppliers and subcontractors (such as repair centres);
- Chain partners and other service providers such as banks, insurers, bailiffs, accountants, tax advisers and other advisers;
- External suppliers such as IT service providers, hosting and cloud service providers or other suppliers to which we outsource IT and support services.
If the third party with which your Personal Data is shared is designated a Data Processor in the sense of the GDPR, we will also conclude a data processing agreement with this third party.
Mustad will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
Security of data
We take appropriate security measures to limit abuse of and unauthorized access to Personal Data. For example, we ensure that only authorised persons have access to Personal Data, that access to and transfer of the Personal Data is protected by appropriate safeguards such as secured connections and firewalls and that our security measures are evaluated and updated regularly.
Your data protection rights under the GDPR
Under the GDPR, you have the following rights:
You have the right to request us to access, rectify, erase, restrict and transfer your Personal Data. You also have the right to object to the processing of your Personal Data.
To the extent that our processing of your Personal Data is based on consent, you have the right to revoke this consent at any time. Any withdrawal of your consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
To exercise these rights, please contact us by:
Email
[email protected]
Written letter
Mustad Netherlands B.V.
Attn.: IT Mustad
Pascallaan 42
8218 NJ Lelystad
The Netherlands
Please note that we may ask you to verify your identity before responding to such requests.
Mustad will respond to your request within 28 calendar days. Depending on the number of requests we receive and the complexity of the requests, this period may be extended by 2 months, in which case we will notify you of such extension.
Please note that individuals’ rights under the GDPR are subject to certain restrictions and may not always be granted. A request may be denied in part or in full following these restrictions, such as legal obligations, the rights of third parties and the legitimate interests of Mustad.
If we are unable to grant a particular request, we will inform you of this, with statement of reasons.
Within the EU, EU citizens have the right to lodge a complaint with a supervisory data protection authority. A list of all EU supervisory authorities is available on the European Data Protection Board website: https://edpb.europa.eu/about-edpb/board/members_en. In the Netherlands this is the ‘Autoriteit Persoonsgegevens’ (‘AP’). More information can be found on the website of the AP (https://autoriteitpersoonsgegevens.nl/). We would appreciate it if you would contact us first so that we can try to reach an amicable solution.
Children's privacy
Our Service does not address anyone under the age of 18 ("Children").
We do not knowingly collect Personal Data from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent (to the extent necessary under applicable law), we take steps to remove that information from our servers.
Changes to this Privacy Policy
We may update our Privacy Policy from time to time. Changes will be published on our websites. It is therefore advisable to consult our websites regularly to keep up to date with any changes.
Contact us
Mustad welcomes your comments regarding this Privacy Policy. For any questions or requests regarding the processing of your Personal Data, please contact us:
● By email: [email protected]
● By phone number: +31(0)320 211 420
This Privacy Policy was last updated and posted on: 3 August 2023